Search: “sql”

168 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 770 Ransomware 315 Exploit / PoC 255 Data breach 199 Malware 165 Industry 94 Policy & legal 64 Threat actor 62 AI tools & infra 38 Advisory 29 Phishing & fraud 21 Tools 20 AI safety & security 19 Research 14

SeverityAll critical 969 high 558 medium 309 low 169 info 80

Palo Alto Networks Discloses New Attack Surface Targeting Microsoft IIS and SQL Server at Black Hat Asia 2021

Palo Alto Unit 42Jun 6, 12:18 UTC · Jun 6, 2024Vulnerability CVE-2021-28455

IDERA expands portfolio of cloud-based database and workload management solutions for SQL Server

Help Net SecurityMar 12, 00:00 UTC · Mar 12, 2020Vulnerability

Automating web security reviews with Netsparker

Troy HuntSep 2, 23:00 UTC · Sep 2, 2014Vulnerability1

Server-side attacks, C&C in public clouds and other MDR cases we observed

Kaspersky SecurelistNov 2, 08:00 UTC · Nov 2, 2022Vulnerability

Cisco addressed SQL Injection flaw in Cisco Prime License Manager

Security AffairsDec 2, 16:37 UTC · Dec 2, 2018Vulnerability

Joomla 3.8.4 release addresses three XSS and SQL Injection vulnerabilities

Security AffairsFeb 8, 11:33 UTC · Feb 8, 2018Vulnerability CVE-2018-6376

Swiss BPC banking software SmartVista is vulnerable to SQL Injection attacks

Security AffairsOct 12, 11:24 UTC · Oct 12, 2017Vulnerability

WordPress releases the version 4.8.3 to address a serious SQL Injection vulnerability

Security AffairsNov 1, 18:23 UTC · Nov 1, 2017Vulnerability

Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth Bypass, and SQL Injection

Okta patched three flaws in Auth0 AD/LDAP Connector and Access Gateway, including a CVSS 9.0 stored XSS tracked as CVE-2026-85982.

Okta disclosed and patched three vulnerabilities on September 8, 2026 affecting the Auth0 AD/LDAP Connector and Okta Access Gateway. CVE-2026-85982 is a CVSS 9.0 stored XSS in the connector's admin panel caused by improper HTML encoding of directory search results and updater logs; CVE-2026-78626 is a CVSS 8.1 authorization bypass in Access Gateway Protected Rules; CVE-2026-78623 is a CVSS 7.7 SQL injection in advanced-mode datastores via unsanitized SAML assertion attributes. Fixes ship in connector version 8.0.0 and Access Gateway 2026.9.1; no exploitation has been reported.

Cyber Security Newsupdated Sep 11, 09:42 UTC · 4d agofirst Sep 11, 08:13 UTC · 5d agoVulnerability 2 sources CVE-2026-85982 CVE-2026-78626 CVE-2026-786231

sqlmap: Open-source SQL injection and database takeover tool

Help Net SecurityNov 10, 00:00 UTC · Nov 10, 2025Vulnerability

Attackers exploiting a FortiClient EMS vulnerability in the wild

Kaspersky SecurelistDec 19, 12:00 UTC · Dec 19, 2024Vulnerability CVE-2023-48788

WordPress Plugin Used by 300,000+ Sites Found Vulnerable to SQL Injection Attack

The Hacker NewsJul 1, 09:26 UTC · Jul 1, 2017Vulnerability

CVE-2026-82232: Apache Syncope: SQL injection via sort parameter in Task search

Apache Syncope's JPA persistence layer allows SQL injection via the sort parameter in Task search, affecting all releases through 4.1.2.

CVE-2026-82232 is rated important by upstream: improper neutralization of special elements in an SQL command allows SQL injection through the sort parameter in Task search within syncope-core-persistence-jpa. Affected versions are 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. No exploitation in the wild is reported.

oss-securitySep 14, 15:54 UTC · 1d agoVulnerability 2 sources CVE-2026-82232

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

The Hacker NewsAug 6, 09:19 UTC · Aug 6, 2026Vulnerability1

SQL Injection flaw in WordPress Plugin WP Statistics

Security AffairsJul 1, 12:19 UTC · Jul 1, 2017Vulnerability

WordPress 4.7.2 release addresses XSS, SQL Injection vulnerabilities

Security AffairsJan 28, 11:47 UTC · Jan 28, 2017Vulnerability

Microsoft warns of attacks targeting MSSQL servers using the tool sqlps

Security AffairsMay 23, 19:05 UTC · May 23, 2022Vulnerability

CVE-2026-82583, CVE-2026-78224, CVE-2026-82578: NextGen Mirth Connect SQL injection and XXE

CISA advisory ICSMA-26-253-01 covers three NextGen Mirth Connect flaws, including SQL injection and XXE, with testing performed against version 4.5.2.

CISA has published ICS Medical Advisory ICSMA-26-253-01 covering three vulnerabilities in NextGen Mirth Connect, the open-source healthcare integration engine. The flaws include SQL injection and XML external entity (XXE) injection, tracked as CVE-2026-82583, CVE-2026-78224 and CVE-2026-82578, with testing performed against version 4.5.2. The findings were announced on the oss-security mailing list by researcher Abhinav Agarwal on September 11.